$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30065/R2FZwqELEEIE8dxJPesrf7ZRnLQ.roa File: R2FZwqELEEIE8dxJPesrf7ZRnLQ.roa (raw, json) Hash identifier: cEpAf7DL9MyCVfHEjz80Qzt2TfWgJr/BT2uKdtyxgEU= Subject key identifier: 47:61:59:C2:A1:0B:10:42:04:F1:DC:49:3D:EB:2B:7F:B6:51:9C:B4 Certificate issuer: /CN=5E816F5DEF023A9CB4A40BBD3CC63FFDF9103EA3 Certificate serial: 26 Authority key identifier: 5E:81:6F:5D:EF:02:3A:9C:B4:A4:0B:BD:3C:C6:3F:FD:F9:10:3E:A3 Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XoFvXe8COpy0pAu9PMY__fkQPqM.cer Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30065/R2FZwqELEEIE8dxJPesrf7ZRnLQ.roa Signing time: Mon 01 Sep 2025 01:34:34 +0000 ROA not before: Mon 01 Sep 2025 01:34:34 +0000 ROA not after: Sat 15 Aug 2026 01:30:02 +0000 asID: 4685 IP address blocks: 2405:6580::/29 maxlen: 30 Validation: OK Signature path: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30065/XoFvXe8COpy0pAu9PMY__fkQPqM.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30065/XoFvXe8COpy0pAu9PMY__fkQPqM.mft rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XoFvXe8COpy0pAu9PMY__fkQPqM.cer rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 18:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5E816F5DEF023A9CB4A40BBD3CC63FFDF9103EA3 Validity Not Before: Sep 1 01:34:34 2025 GMT Not After : Aug 15 01:30:02 2026 GMT Subject: CN=476159C2A10B104204F1DC493DEB2B7FB6519CB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:f7:d7:ff:a2:3c:79:ea:ba:23:ff:5f:c5:5c: e0:1f:a6:68:f2:45:70:62:47:e2:35:99:9b:45:08: 59:bf:4b:5a:99:53:f1:b7:3a:2c:33:b4:dc:36:f7: fb:81:8f:9a:2a:89:fa:b4:4f:1a:76:b8:2e:7e:e7: 05:6d:08:74:cb:ff:fe:a8:c0:e5:55:57:d4:23:7f: 9d:cf:55:43:11:fd:1d:e7:68:3d:2b:ec:5d:09:90: b1:ea:8e:3b:b0:e2:73:90:fa:2c:89:2d:2d:2f:5d: 32:95:50:4a:3e:37:5f:0d:98:13:24:44:7d:cb:68: 61:2a:32:3b:7f:9e:80:6e:84:1f:d1:78:82:2c:26: 26:e5:cd:d6:15:41:ad:af:98:cf:54:00:63:de:da: 03:03:c0:0b:00:78:48:18:9a:7e:2e:ca:6b:4f:68: bd:2f:76:76:82:93:9e:4c:1f:f7:8b:a4:ab:ff:e3: 9a:7e:73:08:1c:df:99:f5:b0:5d:90:a8:2e:6c:74: e1:1b:e1:bd:02:19:23:b9:08:a1:61:99:09:bf:c1: 76:fb:a3:c1:13:e0:99:11:22:bc:c6:27:d0:3b:81: 4f:50:d2:84:34:60:d4:d4:52:7d:da:d1:39:3b:02: 68:b6:2e:cf:a9:de:ca:38:1b:fb:60:0b:d8:d1:ab: 3b:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:61:59:C2:A1:0B:10:42:04:F1:DC:49:3D:EB:2B:7F:B6:51:9C:B4 X509v3 Authority Key Identifier: keyid:5E:81:6F:5D:EF:02:3A:9C:B4:A4:0B:BD:3C:C6:3F:FD:F9:10:3E:A3 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30065/XoFvXe8COpy0pAu9PMY__fkQPqM.crl Authority Information Access: CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XoFvXe8COpy0pAu9PMY__fkQPqM.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30065/R2FZwqELEEIE8dxJPesrf7ZRnLQ.roa RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml sbgp-ipAddrBlock: critical IPv6: 2405:6580::/29 Signature Algorithm: sha256WithRSAEncryption 3b:fa:61:7c:83:de:2a:aa:46:b2:88:6f:c7:b9:ec:4c:5e:30: 87:c9:25:74:85:7e:8c:25:53:7d:87:5e:08:b3:9b:12:3e:88: 96:ba:bf:48:91:21:27:df:04:e5:2a:3d:56:f9:cc:b1:af:34: ee:d7:a9:87:09:a0:ef:b6:b3:aa:08:ad:52:2c:90:f0:48:d2: bb:d6:4d:16:83:72:82:b0:93:f9:61:8f:d7:c9:5d:d3:88:be: 59:fc:a0:81:eb:ad:5c:50:4c:44:a0:bb:79:dc:dd:78:86:cd: 85:2c:0a:a1:ed:2d:92:03:2d:dd:11:63:4a:f9:dc:a8:1d:bb: 51:d2:39:0a:08:43:cd:d1:17:bb:07:64:1a:2a:07:64:75:01: 3a:a9:71:62:97:92:a0:7e:d4:dd:15:a7:18:01:3d:a0:5e:cb: c6:b1:ee:c2:7c:1b:3f:83:32:67:b0:fc:ee:97:cf:d0:4e:5a: 93:56:34:52:c1:1d:60:e5:b4:a8:15:eb:87:73:2c:11:2b:dc: 61:79:3e:cc:a2:51:7e:cb:0f:ca:45:28:4d:6c:51:39:76:9f: 94:c5:10:cb:ed:6b:d9:a6:99:29:bc:5f:a9:43:5f:09:4d:ba: 08:2c:39:7c:c2:3b:b5:09:d1:16:ec:cc:e0:7d:91:12:2d:21: c9:3c:fa:ed -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgIBJjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1RTgx NkY1REVGMDIzQTlDQjRBNDBCQkQzQ0M2M0ZGREY5MTAzRUEzMB4XDTI1MDkwMTAx MzQzNFoXDTI2MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoNDc2MTU5QzJBMTBCMTA0 MjA0RjFEQzQ5M0RFQjJCN0ZCNjUxOUNCNDCCASIwDQYJKoZIhvcNAQEBBQADggEP ADCCAQoCggEBAJ/31/+iPHnquiP/X8Vc4B+maPJFcGJH4jWZm0UIWb9LWplT8bc6 LDO03Db3+4GPmiqJ+rRPGna4Ln7nBW0IdMv//qjA5VVX1CN/nc9VQxH9HedoPSvs XQmQseqOO7Dic5D6LIktLS9dMpVQSj43Xw2YEyREfctoYSoyO3+egG6EH9F4giwm JuXN1hVBra+Yz1QAY97aAwPACwB4SBiafi7Ka09ovS92doKTnkwf94ukq//jmn5z CBzfmfWwXZCoLmx04RvhvQIZI7kIoWGZCb/BdvujwRPgmREivMYn0DuBT1DShDRg 1NRSfdrROTsCaLYuz6neyjgb+2AL2NGrO6sCAwEAAaOCAikwggIlMB0GA1UdDgQW BBRHYVnCoQsQQgTx3Ek96yt/tlGctDAfBgNVHSMEGDAWgBRegW9d7wI6nLSkC708 xj/9+RA+ozAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4 MTAwMDAvMzAwNjUvWG9GdlhlOENPcHkwcEF1OVBNWV9fZmtRUHFNLmNybDBtBggr BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5 Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvWG9GdlhlOENPcHkwcEF1OVBNWV9f ZmtRUHFNLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv QTkxQTczODEwMDAwLzMwMDY1L1IyRlp3cUVMRUVJRThkeEpQZXNyZjdaUm5MUS5y b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwIAYIKwYBBQUHAQcBAf8EETAPMA0E AgACMAcDBQMkBWWAMA0GCSqGSIb3DQEBCwUAA4IBAQA7+mF8g94qqkayiG/HuexM XjCHySV0hX6MJVN9h14Is5sSPoiWur9IkSEn3wTlKj1W+cyxrzTu16mHCaDvtrOq CK1SLJDwSNK71k0Wg3KCsJP5YY/XyV3TiL5Z/KCB661cUExEoLt53N14hs2FLAqh 7S2SAy3dEWNK+dyoHbtR0jkKCEPN0Re7B2QaKgdkdQE6qXFil5KgftTdFacYAT2g XsvGse7CfBs/gzJnsPzul8/QTlqTVjRSwR1g5bSoFeuHcywRK9xheT7MolF+yw/K RShNbFE5dp+UxRDL7WvZppkpvF+pQ18JTboILDl8wju1CdEW7MzgfZESLSHJPPrt -----END CERTIFICATE-----Generated at Mon Sep 8 19:16:47 2025 by rpki-client